Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 18:31

General

  • Target

    b9624edd52a86ab0874fdc14e8107734.pdf

  • Size

    33KB

  • MD5

    b9624edd52a86ab0874fdc14e8107734

  • SHA1

    12eaa373dc80f7a07c0629e0cc87d549d057182a

  • SHA256

    a85a84fb8d8b3eb59848cecc64e92577cc6001a16db1d2733a73320cb4e8d9dc

  • SHA512

    989dc748671ceaa5ca4122c6dc1c7b75279807f42deb1de721fe735f4d604a8ed90e669900a5c9653fa9d30840256b193e991da7f276faf95e7862c9f56b12dc

  • SSDEEP

    768:a7BSBuYIdxOu3UqtgQ98AJC5jIbKr6ZdkpEwIJIWMN:Mxd3Uqtgm86UjI+udkpEwIJVMN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b9624edd52a86ab0874fdc14e8107734.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1540

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f01be872a312433fb7fc08924318d28e

          SHA1

          b35fd35c55aa58f5d3c6e9ea6758ccd46343390d

          SHA256

          8b78dcadf6a9c769f1ce0ec71b88af086e9d586159a02a8596aef09ea64989f8

          SHA512

          99f97f8744592aa6d21c9a9328ae2801b8e2cbccdb79c0e2b3cc97d867faf0ed81d72a5237ad6d776e163ac921e0e7bbc770bc95ea3b1b8d14fc23d05085617b